Elementor

<p>Sticklight Connector provides a structured way to use the WordPress user system in external or React-based applications.</p>
<p>The plugin extends the WordPress REST API with additional endpoints that allow authenticated clients to retrieve user context and interact with WordPress data, while fully respecting core authentication methods, roles, and capability checks.</p>
<p>Sticklight does not replace WordPress authentication. It relies on <code>wp_authenticate</code> for credential validation and WordPress Application Passwords for API access, and follows standard permission checks (<code>current_user_can</code>) for all requests.</p>
<h4>Typical use cases</h4>
<ul>
<li>React applications connected to a WordPress site</li>
<li>Headless or hybrid WordPress setups</li>
<li>Admin or user dashboards built outside wp-admin</li>
<li>External tools that require authenticated access to WordPress data</li>
</ul>
<h4>Features</h4>
<ul>
<li>Authenticates via <code>wp_authenticate</code> and issues Application Passwords for API access</li>
<li>Adds REST endpoints for login, logout, and retrieving current user context</li>
<li>Enforces WordPress capability checks on all requests</li>
<li>Supports cross-origin headless setups</li>
<li>Extensible via WordPress hooks and filters</li>
</ul>
<h3>Usage</h3>
<h4>Login</h4>
<p>Authenticate with username (or email) and password:</p>
<pre><code>POST /wp-json/sticklight/v1/auth/login
</code></pre>
<p>On success the response includes an Application Password for subsequent API requests and the authenticated user:</p>
<pre><code>{
  "app_password": "XXXX XXXX XXXX XXXX XXXX XXXX",
  "user": {
    "user_id": 1,
    "username": "admin",
    "display_name": "Admin",
    "email": "admin@example.com",
    "roles": ["administrator"]
  }
}
</code></pre>
<p>Use the returned <code>app_password</code> with HTTP Basic Authentication for all further requests.</p>
<h4>Current user</h4>
<p>Retrieve the current authenticated user:</p>
<pre><code>GET /wp-json/sticklight/v1/auth/me
</code></pre>
<h4>Logout</h4>
<p>Revoke the current Application Password session:</p>
<pre><code>POST /wp-json/sticklight/v1/auth/logout
</code></pre>
<h4>User registration</h4>
<p>User creation is handled through the built-in WordPress REST API (<code>POST /wp-json/wp/v2/users</code>) and requires administrator authentication.</p>
<h4>Accessing protected data</h4>
<p>Requests to any endpoint must pass standard WordPress permission checks. Sticklight does not bypass or override these checks.</p>
<h3>Security</h3>
<p>Sticklight follows WordPress security practices:</p>
<ul>
<li>Authenticates via <code>wp_authenticate</code>, which respects all security plugin hooks (rate limiting, two-factor authentication, brute-force protection)</li>
<li>Issues Application Passwords scoped to individual sessions</li>
<li>Does not provide user registration — accounts must be created by an administrator</li>
<li>Applies capability checks (<code>current_user_can</code>) on all endpoints</li>
<li>Does not expose private data without proper permissions</li>
</ul>
<p>For external applications, it is recommended to:</p>
<ul>
<li>Use HTTPS</li>
<li>Restrict allowed origins</li>
<li>Avoid exposing sensitive endpoints unnecessarily</li>
</ul>


Sticklight

Use WordPress authentication and permissions in external React applications via secure REST API endpoints.

ariellejphoenix

<p><strong>Metronyx Headless CMS Connector</strong> provides a clean, secure REST API to connect your WordPress content with any frontend framework. Perfect for developers building modern web applications with Next.js, React, Vue, Angular, or any other frontend technology.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Clean REST API</strong> – Simple endpoints for posts, pages, and content</li>
<li><strong>Advanced Content Delivery</strong> – Optimized for modern headless CMS implementations</li>
<li><strong>CORS Support</strong> – Configured for secure frontend framework connections</li>
<li><strong>Framework Agnostic</strong> – Works with Next.js, React, Vue, Angular, and any frontend</li>
<li><strong>SEO Optimized</strong> – Built-in meta fields and structured data for better search performance</li>
<li><strong>Enterprise Security</strong> – Built-in security features, input validation, and rate limiting</li>
<li><strong>Complete Documentation</strong> – Built-in API docs and usage examples</li>
</ul>
<h4>Security Features</h4>
<p>This plugin has been thoroughly audited and includes:</p>
<ul>
<li>Input validation and sanitization</li>
<li>CSRF protection with nonce verification</li>
<li>XSS prevention with output escaping</li>
<li>Rate limiting and pagination limits</li>
<li>CORS security with strict origin validation</li>
<li>Path traversal protection</li>
<li>Proper capability checks for admin functions</li>
</ul>
<h4>API Endpoints</h4>
<p><strong>Posts & Pages:</strong><br />
* <code>GET /wp-json/metronyx-connector/v1/posts</code> – All posts with pagination<br />
* <code>GET /wp-json/metronyx-connector/v1/posts/{slug}</code> – Single post by slug<br />
* <code>GET /wp-json/metronyx-connector/v1/posts/featured</code> – Featured posts only<br />
* <code>GET /wp-json/metronyx-connector/v1/pages</code> – All pages<br />
* <code>GET /wp-json/metronyx-connector/v1/pages/{slug}</code> – Single page by slug</p>
<p><strong>Categories & Tags:</strong><br />
* <code>GET /wp-json/metronyx-connector/v1/categories</code> – All categories<br />
* <code>GET /wp-json/metronyx-connector/v1/tags</code> – All tags</p>
<p><strong>Coming Soon:</strong><br />
* Advanced e-commerce endpoints (future releases)<br />
* Enhanced content filtering and search<br />
* Multi-site headless architecture support</p>
<h4>Data Structure</h4>
<p>Each post/page includes:<br />
* Basic content (title, slug, content, excerpt)<br />
* SEO metadata (title, description, canonical URL)<br />
* Featured images with multiple sizes<br />
* Categories and tags<br />
* Author information<br />
* Custom meta fields</p>
<p>Future releases will include:<br />
* Advanced content filtering and search capabilities<br />
* Enhanced SEO metadata and structured data<br />
* Multi-language content support<br />
* Custom post type integration<br />
* Performance analytics and insights</p>
<h4>Usage Example</h4>
<pre><code>// Fetch all posts
const posts = await fetch('/wp-json/metronyx-connector/v1/posts')
  .then(res => res.json());

// Fetch single post
const post = await fetch('/wp-json/metronyx-connector/v1/posts/your-post-slug')
  .then(res => res.json());

// Next.js example
export async function getStaticProps({ params }) {
  const post = await fetch(`${process.env.WORDPRESS_API_URL}posts/${params.slug}`)
    .then(res => res.json());

  return { props: { post } };
}
</code></pre>
<h3>Professional Services</h3>
<p>Need someone to run SEO and AI Search Optimization for your headless WordPress build?</p>
<p>The team behind this plugin is <strong>Metronyx AI</strong>, a managed SEO + AEO agency. We do the technical SEO foundation (titles, metas, schema, sitemaps, indexation) plus the AI search layer for headless and decoupled setups:</p>
<ul>
<li><strong>Full-Stack SEO + AEO</strong> – Technical SEO foundation plus AI search optimization for ChatGPT, Perplexity, Gemini, and Claude</li>
<li><strong>Headless Architecture Support</strong> – REST API design, frontend-backend decoupling, deployment pipelines for Next.js, React, or Vue</li>
<li><strong>Schema & Structured Data</strong> – Engineered to feed AI engines machine-readable signals they actually use</li>
<li><strong>AI Crawler Management</strong> – Strategic robots.txt, server directives, and crawler config so GPTBot, ClaudeBot, and PerplexityBot can actually access your content</li>
<li><strong>AEO-BLUF Content Creation</strong> – Bottom Line Up Front content engineered for AI citation extraction</li>
<li><strong>Entity Building & Brand Mentions</strong> – Off-site signals across Reddit, YouTube, and industry directories to build entity trust</li>
<li><strong>Competitor Citation Tracking</strong> – See where rivals appear in AI answers that you don’t</li>
<li><strong>Link Building & Weekly Reporting</strong> – Real backlinks, real reports, real progress</li>
</ul>
<p>What’s different: smart onboarding. We start executing day one, not after a month of paperwork. Most clients see citations climbing within 90 days. Typical agencies take 12 months to even start.</p>
<p>Every client gets a self-contained dashboard tracking citations across ChatGPT, Perplexity, Gemini, and Claude in real time.</p>
<p>Learn more at <a href="https://metronyxai.com" rel="nofollow ugc">metronyxai.com</a> or <a href="https://metronyxai.com/audit/" rel="nofollow ugc">get a free AI Visibility Audit</a>.</p>
<h3>Developer</h3>
<p>Built and maintained by <strong>Arielle Phoenix</strong> (<a href="https://ariellephoenix.com" rel="nofollow ugc">ariellephoenix.com</a>).<br />
AI SEO and headless WordPress solutions by <strong>Metronyx AI</strong> (<a href="https://metronyxai.com" rel="nofollow ugc">metronyxai.com</a>).</p>


Metronyx Headless CMS Connector

Transform your WordPress site into a powerful headless CMS for modern frontend frameworks like Next.js, React, Vue, and more.

Sticklight vs Metronyx Headless CMS Connector